Error: rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
File:                     vM6G1hLUP4QasEFuxaiEBw9c5dY.mft (raw, json)
Hash identifier:          YRpkafX2GTTVmdrfSqafsdmRNV1r22yB5pKYX/PLOB4=
Subject key identifier:   B0:6C:DA:DF:84:6B:8B:76:1B:D9:6E:9A:67:67:31:F9:5A:4B:11:30
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Certificate issuer:       /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial:       0AEB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
Manifest number:          0ADF
Signing time:             Tue 27 Oct 2026 01:27:02 +0000
Manifest this update:     Tue 27 Oct 2026 01:27:01 +0000
Manifest next update:     Thu 29 Oct 2026 01:27:01 +0000
Files and hashes:         1: vM6G1hLUP4QasEFuxaiEBw9c5dY.crl (hash: O0hso43sbEl4Ki/m8m/OZXyWJL7xtrdVMAvKsw++5tk=)
                          2: 38C9E54AC96611F1934D6707CF1D38B0.roa (hash: Ybx9UDCpAGxCaaCNTraiGUFElhYUsvaWsxK28fY65jM=)
                          3: 02F61C8EED4611EF9EE0C559762E951A.roa (hash: a0VBoAhb+w/AiTpkwDup0ND635i4uEH4NIMUxN2UJ2c=)
                          4: 8B320BD2C96611F1A7BF580BCF1D38B0.roa (hash: iYn/Q3JK8WsRGrCtIsQihC2VQsqLwwepcWdZFw2yTBE=)
                          5: AB99A25EC96611F1B6C1770BCF1D38B0.roa (hash: CQL+88ui6/yMvD9CE4CqyxIev1XXe0EylJPrQvptnhE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAF, serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
        Validity
            Not Before: Oct 27 01:27:01 2026 GMT
            Not After : Oct 29 01:27:01 2026 GMT
        Subject: CN=6adffde5-c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:44:c8:fc:52:61:ce:2a:36:5f:29:66:b2:
                    61:d4:4b:af:01:81:e4:0d:5f:b2:19:86:61:a1:e5:
                    a2:45:a3:f5:6b:86:52:23:17:5e:f3:a6:ef:3a:f6:
                    13:4f:28:f7:98:14:6a:54:e1:0b:90:11:16:f9:64:
                    71:36:14:b0:80:85:60:76:f2:59:ca:3b:51:ed:58:
                    ce:92:20:40:c0:61:0f:70:f6:3e:0b:7d:4b:8c:d8:
                    83:d1:db:40:7a:20:9b:e5:ef:15:3f:26:b7:1b:d0:
                    38:fb:90:2b:8d:9b:6b:60:15:d5:63:64:d5:85:b1:
                    95:bd:23:9b:26:79:ec:3c:bd:34:58:de:54:77:fa:
                    79:07:98:7f:af:72:43:31:b2:f0:2f:72:b3:ee:4b:
                    8f:0c:d2:85:92:90:d9:fb:1b:a1:ab:13:c2:5d:6d:
                    aa:51:10:87:e3:b4:ee:ae:ae:a9:1a:3c:94:da:0d:
                    02:27:e9:b4:34:73:95:36:9b:92:4e:b9:37:3f:4b:
                    66:b0:ea:cf:f0:f2:da:38:42:bd:1b:99:aa:b4:d0:
                    57:c9:27:13:26:c6:b9:ac:71:0e:6d:1e:af:ea:0c:
                    95:df:e1:d6:12:80:4e:9e:d9:0e:ce:3c:b8:48:f5:
                    88:62:57:e2:9d:64:ae:5b:eb:b1:c0:f4:18:cb:ca:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6C:DA:DF:84:6B:8B:76:1B:D9:6E:9A:67:67:31:F9:5A:4B:11:30
            X509v3 Authority Key Identifier:
                keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:0b:fc:9b:3c:f1:e9:16:40:7b:5c:a4:2b:13:78:c0:d6:
         e3:a9:58:64:7d:35:8d:dd:6c:e7:d7:35:a2:97:8a:22:19:5c:
         db:f8:ec:71:6f:fa:96:02:a5:f5:d8:d4:9d:3b:53:1c:67:b1:
         0a:3a:68:e1:ab:8d:84:ba:e0:86:0e:2a:1d:5c:fe:8f:52:3f:
         b7:9e:c0:70:4e:3a:76:d0:98:dc:21:d7:73:6e:16:c8:0f:db:
         d3:50:a0:2f:82:ba:c1:23:8e:a2:e2:48:b9:fc:ca:ef:2e:7a:
         56:b5:59:65:35:5e:1c:d8:d1:d6:95:64:fa:cf:b2:7a:0f:ae:
         6d:de:43:7e:97:13:0a:3b:f5:8c:4f:4f:c8:87:4b:0b:51:8d:
         9d:81:f8:4a:ea:68:86:b8:6f:9a:4f:81:bf:40:23:c4:e5:0e:
         29:65:c7:6a:b2:74:fd:5a:8d:31:9a:db:99:3e:e7:93:c4:05:
         21:b0:2d:40:ad:3a:f8:ed:cd:6d:7e:85:ec:fd:99:7b:a6:9a:
         90:19:b5:06:3e:58:45:59:99:a6:9b:ff:11:4d:fa:a1:b4:05:
         e9:e6:c4:1a:c2:3f:79:63:0a:40:84:71:c4:da:a1:e6:31:12:
         91:a3:49:37:01:b9:39:d7:3c:21:b5:49:bc:c3:05:85:f0:46:
         66:4c:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:31:49 2026 by rpki-client